Cookie Policy

This Cookie Policy explains how Pholio ("Pholio," "we," "us") uses cookies and similar technologies on its marketing website, application, and Public Sites served through the Services. Capitalized terms have the meanings given in the Terms of Service. The Privacy Policy explains the associated personal-data processing.

Cookies store small values in a browser. Related technologies include localStorage, sessionStorage, authentication tokens, link identifiers and server records associated with a browser or request. A technology can process personal data even when it does not set a cookie.

This Policy covers technologies controlled by Pholio. A third-party website reached from Market, a social link, an embedded service, or a Recipient's independent website may have its own technologies and notices. A Pholio analytics choice does not control that third party's independent processing.

Authentication, security, consent records and technologies needed to provide a feature you request support the operation of the Services. Pholio's analytics preference does not disable these technologies. You can restrict them through your browser, but login, checkout, recovery or another requested feature may then fail.

On pholio.studio and its subdomains, the preference uses the .pholio.studio domain so the same browser choice applies to www.pholio.studio and app.pholio.studio. On another domain, including a separate custom domain or preview host, browser restrictions can require a separate preference. Choices do not automatically follow you across browsers or devices.

pholio_cookie_consent_v1 is an older localStorage preference. Where present, it can be read to migrate an existing choice to pholio_consent. Resetting cookie preferences clears this legacy record on the current origin as well as the current consent cookie.

With an affirmative analytics choice, Pholio can use persistent visitor and visit identifiers to measure audiences and interactions on a Public Site. Without that choice, Pholio does not create or renew the optional visitor session described below.

Consented analytics may associate views, returning visits, image impressions or opens, reading and dwell events, contact or social clicks, scroll activity and shared-link activity with visitor/session identifiers, IP address, user agent, referrer, approximate location and time. Talent can receive audience and engagement information for their Public Site. These records are not necessarily anonymous.

Pholio does not use these analytics cookies for cross-context behavioral advertising. Our current Services do not use third-party advertising pixels to sell or share personal data for that purpose.

Declining optional analytics does not stop every server record. Pholio and its hosting, delivery and security providers process requests to deliver pages, authenticate users, prevent abuse and investigate errors. Those records can include IP addresses, requested resources, time and other network information under the Privacy Policy.

Pholio also records certain portfolio views and interactions to produce usage counts without creating the optional persistent visitor session. For these nonconsented event records, the portfolio event logger omits IP address and user agent; it can retain the profile, event, time and referrer or other event metadata. A referrer is information about the page or link from which a visit originated and can include information in its URL. These records are not represented as wholly anonymous merely because no analytics cookie is set.

Necessary security processing, aggregate reporting and optional visitor tracking serve different purposes. Where applicable law requires consent for a particular storage or processing activity, Pholio must obtain that consent before the activity or restrict it.

Firebase and Google can use authentication storage, sign-in state and provider cookies when you use their authentication features. Google-controlled pages apply Google's own notices to independent processing.

Stripe can use checkout, fraud-prevention and session technologies when you open its hosted checkout, billing portal or an enabled identity-verification flow. The applicable Stripe notice is presented with that service.

Cloudflare, Netlify and other infrastructure providers process technical requests needed to deliver or protect the Services. An external social, video or other linked service may also collect information when you choose to open or use it. The Privacy Policy describes provider and integration roles.

The cookie banner offers an affirmative analytics choice and a necessary-only choice. You can withdraw an earlier choice using the Cookie preferences control in the footer or change your choice on this page. Resetting preferences removes the current preference and reopens the banner; optional visitor tracking requires an affirmative choice again.

Withdrawal affects future optional tracking after the change is read. It does not itself delete previously stored cookies, reports or server records. You can clear existing cookies through your browser and request deletion of qualifying server data at privacy@pholio.studio. We may need enough information to locate the records and verify your request.

Browser settings can block, delete or limit cookies and local storage. Private browsing and clearing site data can cause Pholio to ask for your choice again. Blocking authentication or payment technologies can interrupt those services.

Pholio does not treat a Do Not Track header as a general instruction to stop all processing. We honor legally required opt-out requests and signals for processing to which those rights apply, as explained in the Privacy Policy. A signal is not required to choose necessary-only analytics.

A cookie's expiry is different from the retention period for an associated server record. Session, analytics, consent and security records follow the purpose-based retention criteria in the Privacy Policy, including lawful security, dispute and recordkeeping exceptions. Deleting a cookie does not delete those records.

Talent accounts are currently available only to adults under the Terms of Service. Public pages can nevertheless be visited by young people. The Services are not directed to children under 13. A parent, guardian or young person can contact privacy@pholio.studio about information collected from a child or an applicable privacy choice. The Guardian and Minor Notice explains the separate status of any future minor program.

We may revise this Policy when technologies, purposes, providers or legal requirements change. The revised Policy will state its update and effective dates. We will provide additional notice and obtain a new choice where required; posting a revised Policy does not itself constitute your consent.

For cookie, analytics, browser-storage or deletion requests, contact privacy@pholio.studio.